1.1.0

Known Issue

The apigee-istio provision --grpc command creates an incorrect handler file. You must edit the file to have kind: handler and adapter: apigee. Without the correct field values, the handler will not be recognized by Mixer.

Release Notes

As of Istio 1.1.0, policy control is no longer enabled by default. For Apigee's policy features to take effect, policy control must now be explicitly enabled in Istio config. See Enabling Policy Enforcement for more details.

This release exclusively supports Istio 1.1's external gRPC Mixer adapter protocol - it does not require or include a custom mixer image.

Istio Compatibility

This release is for Istio 1.1.0 and above. It has been tested against Istio 1.1.0.

1.0.6

Istio Compatibility

This mixer release is compiled against Istio 1.0.6.

Mixer Information

image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.6
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.6

Changelog

5606c8e update proto docs
5e6b44c switch to helm install instead of install samples

1.0.5

Istio Compatibility

This mixer release is compiled against Istio 1.0.5.

Upgrading

Be sure to run apigee-istio provision again with the --forceProxyInstall option to install the newest proxy.

Mixer Information

image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.5
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.5

Changelog

cb11bd0 updates to auth-proxy
636e487 fix logging
899f0bf change upload folder format - must not use ":"

1.0.3-2

Istio Compatibility

This mixer release is compiled against Istio 1.0.3.

Upgrading

Be sure to run apigee-istio provision again with the --forceProxyInstall option to install the newest proxy.

Mixer Information

image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.3-2
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.3-2

Changelog

d8f6564 change upload folder pattern, fix close behavior (#219)
e19647c expose SendChannelSize config
139bc51 format each record in gzip individually, no arrays
e3a43cd Fix AX receiving invalid gzip files
support multiple apps in auth proxy
fix api key verification in auth proxy

1.0.4

Note

This is the final 1.0.4 release compiled against Istio 1.0.4.

Mixer Information

image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.4
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.4

Changelog

d8f6564 change upload folder pattern, fix close behavior (#219)
e19647c expose SendChannelSize config
139bc51 format each record in gzip individually, no arrays
e3a43cd Fix AX receiving invalid gzip files

1.0.3

Note

This is the final 1.0.3 release compiled against Istio 1.0.3.

Mixer Information

image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.3
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.3

Changelog

d22b15d add token support for OAuth and SAML access to Apigee management APIs

1.0.2

Note

This is the final 1.0.2 release compiled against Istio 1.0.2.

Mixer Information

image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.2
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.2

Changelog

9153353 remove description from products, fixes #161
869464a grpc adapter support - prerelease (#190)
da360b7 verify api key before gen token
96fcd55 Correct Apigee istio-auth/token API Request
a894fc4 fix race condition in quota
a7c61ab rename deprecated attribute "destination.service" to "destination.service.host"
eef0724 eliminate .netrc check error on version cmd

1.0.0

Note

This is the final 1.0.0 release compiled against Istio 1.0.0.

Mixer Information

image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.0
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.0

Changelog

edfaaab rotate api should use adapter key/secret for auth
980ff1a add mTLS option and documentation for authentication-policy.yaml (#169)
eda722a fix error message on invalid product binding commands
8825cdf parse Istio's request_path (includes query) to derive Apigee's request.path (no query)
7c75aa5 properly close background goroutines

1.0.0-rc1

Note

This is a pre-release for testing against Istio 1.0 snapshots. A final release will be made when Istio 1.0 has shipped.

Mixer Information

Built on Istio 1.0-branch as of 7/25
image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.0-rc1
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.0-rc1

Changelog

3556623 /verifyApiKey and /token endpoints should not get internal error when app has no products
c66bf34 rename server_timeout_secs to client_timeout, rename products:refresh_rate_mins to products:refresh_rate, change both config elements to duration types
af2fb72 base on Istio release-1.0 branch
1d9a8e7 ensure products list is included when app has multiple products
074b216 ignore empty telemetry requests
f0c0264 require auth for /products and /verifyApiKeys
3ec2e86 allow api key to be retrieved from jwt token, config via 'api_key_claim'
ffe2190 add binding now works when attribute doesn't already exist
8dd357a fix ax crash recovery
9b2eac9 rotate now displays proper auth error
97581e7 return 4xx for bad auth
7562ec5 apigee-rule now applies to everything in default namespace
a91d29f opdk must verify legacy analytics endpoint
1318823 Removed hardcoded org name to use org name passed in from command line.
edf3a79 allow provision output to be directly sent to a handler yaml file
aba9803 change install/ to samples/ and provide Kubernetes install files for Istio
b7a932c disable jwt verification and jwks polling, add optional config items
70ecc03 encrypt kvm, add /rotate endpoint and CLI support
5003fd7 build mixer-debug image
c70b10b analytics legacy_endpoint for opdk provisioning
47d44b9 add gateway_source to analytics
34a1d73 api_key now skips scope checks
58d802f skip mgmnt auth when it's not needed
2dd3633 fix "null" quota interval parsing error

1.0.0-alpha-3

Mixer Information

Built on Istio 0.8.0
image: gcr.io/apigee-api-management-istio/istio-mixer:1.0.0-alpha-3
debug image: gcr.io/apigee-api-management-istio/istio-mixer-debug:1.0.0-alpha-3

Known issues

analytics in opdk not complete
cert rotation will return 500 instead of 403 for bad auth
the packaged sample/apigee/handler.yaml should not have a comma after server_timeout_secs: 60

Changelog

apigee-rule now applies to everything in default namespace
removed hardcoded org name to use org name passed in from command line
allow provision output to be directly sent to a handler yaml file
change install/ to samples/ and provide Kubernetes install files for Istio
disable jwt verification and jwks polling, add optional config items
encrypt kvm, add /rotate endpoint and CLI support
build and publish istio-mixer-debug as well as istio-mixer image
analytics legacy_endpoint for opdk provisioning
add gateway_source to analytics
api_key now skips scope checks
skip management auth when it's not needed
fix "null" quota interval parsing error
provision now works with opdk